Experian is pairing its identity checks for AI shopping agents with DataDome’s behavior monitoring, the companies said on October 1, 2026. The announcement adds a second layer to Experian’s Agent Trust ecosystem: Experian confirms which verified person an agent is acting for, while DataDome watches what that agent does during the visit.
The release was light on commercial specifics: no pricing, no availability date, no launch customer and no technical specification. But the strategic logic is clear enough.
Identity says who; behavior says what they’re doing
Experian’s framework already had Human to Agent Binding, which links a verified consumer, their device and the AI agent representing them. DataDome adds what the companies call continuous intent verification. The goal is to let a legitimate agent buy for a real customer without extra friction, while stopping an agent that has been hijacked or is acting outside its authority.
Kathleen Peters, Experian’s Chief Innovation Officer, framed the stakes this way: agentic commerce will only succeed if organizations can trust the agents acting for consumers. DataDome’s Chief Marketing & Alliances Officer, Aurelie Guerrieri, said the aim is to let trusted agents “transact without friction while stopping malicious or compromised agents in real time.”
Why a login check is not enough
The problem is that credentials presented at the start of a session do not protect an agent from being compromised mid-session. DataDome’s own research shows how much activity is already aimed at high-risk pages. In the first half of 2026, it counted 605.6 million AI requests hitting logins, forms, carts, payment flows and account creation. Login pages took 313 million of those requests, and monthly AI requests to login pages rose from 11.9 million in January to 99.7 million in June.
For marketers, those numbers land on revenue and measurement:
- Forms are lead capture: DataDome counted 198.9 million AI requests to forms on customer sites in that period.
- Carts are where retargeting pools are built, and agencies have reported non-human visitors filling those audiences as CPMs climbed 20%.
- DoubleVerify reported AI bots generated up to 10 times more clicks than humans in some unprotected campaigns.
So the trust layer is not just a checkout problem. If agent orders and form fills are not labelled downstream, they can pollute analytics, attribution and retargeting.
The missing piece is downstream classification
The release also leaves open how DataDome’s role relates to earlier ecosystem partners. Fastly already claimed to evaluate intent at the edge, and Experian’s own Agent Registry described a behavioral score. For now, the practical watchpoint is whether the combined service publishes the mechanics merchants need to evaluate it.
What marketing teams should do now
The Experian-DataDome stack offers a useful model: verify identity first, then keep evaluating behavior. But the release does not say whether DataDome’s classifications flow into analytics tools, ad platforms or conversion APIs. That gap is the practical issue for growth teams.
Before agent traffic scales further, audit your own high-risk endpoints and ask vendors whether AI agent activity is separated from human activity in reporting. Do not block all agents, because that can forfeit legitimate sales. But do not treat a verified identity as the end of the conversation.
Source: PPC Land
